Aggregator

Интерпол рассказал, как Азия превращается в главный полигон цифровой преступности.

ThermoPhy стирает границу между статистикой и ощущением.

Хакеры атаковали Mackay Sugar, поставщика сахара в Южную Корею, Японию, Индонезию и Малайзию, в разгар производственного сезона.

A vulnerability was found in ILIAS Learning Management System 11.0 and classified as critical. This issue affects the function ilTrQuery::executeQueries of the file components/ILIAS/Tracking/classes/class.ilTrQuery.php of the component Learning Progress Tracking. Such manipulation of the argument troup_table_nav leads to sql injection. This vulnerability is referenced as CVE-2026-12789. It is possible to launch the attack remotely. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Submit #836104 / VDB-372531

A vulnerability has been found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0 and classified as problematic. This vulnerability affects unknown code of the file /adpweb/a/base/barcodeDetail/import of the component XML Parser. This manipulation causes xml external entity reference. The identification of this vulnerability is CVE-2026-12788. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. This affects an unknown part of the component testConnection Endpoint. The manipulation of the argument jdbcUrl results in deserialization. This vulnerability was named CVE-2026-12787. The attack may be performed from remote. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

如果我们真正深入这三位之间的过往，了解他们今日成就背后的深层关联，就能看到一个比「财富碾压」要更令人震撼的故事。

DarkHotel APT组织最新攻击活动深度分析

A vulnerability, which was classified as critical, has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. This vulnerability is uniquely identified as CVE-2026-12786. Local access is required to approach this attack. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

活动时间：6月10日-6月21日

看雪论坛作者ID：x1ny

Submit #835655 / VDB-372530

Submit #835654 / VDB-372529